MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f49a52f841c0947006b687698efd2349648fb3c5aea51fbfaa099b5a5ab30463. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: f49a52f841c0947006b687698efd2349648fb3c5aea51fbfaa099b5a5ab30463
SHA3-384 hash: 42f7f1ac823abe3cf9180882342534ba4ee8045d7d7d7547600a364fe9b9b843b8b89578348261eb4d6ae629ed84e3b2
SHA1 hash: 16c20324da04c5e99230a5c39efc96714340ce18
MD5 hash: 41edb90d4d8c3c20a2d0536df9b4f8f2
humanhash: october-five-early-vermont
File name:Agency Fund JUNE20_Revised.zip
Download: download sample
Signature MassLogger
Create hunting rule
File size:830'701 bytes
First seen:2020-07-07 05:31:57 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:GUat5GkLM2SnYM8Pr4FXQnqfMgaWR6zVcVDqqc/7mL1odDgk6l1M0wm7n7ak:5a1LM2SnY/ryAqExpxsDbcce9KM0NnR
TLSH 430533F304B5F5E046F19EACE6CA684D930591AFF98E34C1A1CE57C88172DA64D6882F
Reporter cocaman
Tags:MassLogger zip


Avatar
cocaman
Malicious email
From: =?UTF-8?Q?=E5=A4=A7=E6=B2=BC=E3=80=80=E6=84=9B?=
<export01@kanto-intel.co.jp>
Received: from amout07.alpha-mail.net (amout07.alpha-mail.net [216.230.254.47])
Date: Mon, 06 Jul 2020 22:31:39 +0100
Subject: Agency Fee for month JUNE
Attachment: Agency Fund JUNE20_Revised.zip

Intelligence

File Origin
# of uploads :
1
# of downloads :
68
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.MSIL.Kryptik.VFR-1.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/f49a52f841c0947006b687698efd2349648fb3c5aea51fbfaa099b5a5ab30463/
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-07-07 05:33:05 UTC
File Type:
Binary (Archive)
Extracted files:
18
AV detection:
32 of 48 (66.67%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=6snff6cbyckhabvwq5uy57jdjfsi7m6fv2sr7p5kbgnvuwvtarrq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

zip f49a52f841c0947006b687698efd2349648fb3c5aea51fbfaa099b5a5ab30463

(this sample)

MassLogger

Executable exe 98ec6884be9b64e2e37a37460bd3d8ca770f2ef2d1d5cd4b6321a01462c8d32b

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 98ec6884be9b64e2e37a37460bd3d8ca770f2ef2d1d5cd4b6321a01462c8d32b

Comments